Subject: Re: pkg/36267 (patch for CVE-2006-5178 bug in php4 package)
To: None <jdolecek@NetBSD.org, pkgsrc-bugs@netbsd.org,>
From: None <jdolecek@netbsd.org>
List: pkgsrc-bugs
Date: 09/05/2007 20:28:04
Synopsis: patch for CVE-2006-5178 bug in php4 package
State-Changed-From-To: open->closed
State-Changed-By: jdolecek@netbsd.org
State-Changed-When: Wed, 05 Sep 2007 20:28:02 +0000
State-Changed-Why:
As you note, this is not a complete solution. In either way, it should
be first discussed with PHP maintainers, we can't claim we've fixed
CVE-2006-5178 until the fix get official blessing.